Question 1

Which of the following is the most effective way to enhance security when configuring VLANs?

Options :

A : Use a single VLAN for all devices to simplify management and prevent misconfigurations.

B : Allow unrestricted trunking to ensure all VLANs can communicate with one another without additional configurations.

C : Disable unused switch ports and assign them to a dedicated, unused VLAN.

D : Configure inter-VLAN routing on the same switch without using access control lists (ACLs).

Answer: C

Question 2

Which of the following is an example of a service commonly hosted in a demilitarized zone (DMZ)?

Options :

A : A database server storing sensitive customer information.

B : A web server hosting the company’s public website.

C : A backup server used for storing disaster recovery data.

D : An internal file-sharing server accessible only to employees.

Answer: B

Question 3

Which of the following best describes the primary function of a Data Loss Prevention (DLP) system in network security?

Options :

A : Encrypting data at rest and in transit to protect it from unauthorized access.

B : Detecting and blocking unauthorized attempts to transmit sensitive data outside the organization.

C : Blocking malicious incoming traffic from reaching the organization-s internal network.

D : Monitoring user activity to identify suspicious behavior based on login patterns.

Answer: B

Question 4

Which characteristic best demonstrates a critical aspect of the "people" pillar in effective security operations?

Options :

A : Expertise in interpreting and analyzing security alerts generated by automated tools

B : Focus on reducing mean time to detect (MTTD) through automated systems

C : Procurement of cutting-edge cybersecurity tools and platforms

D : Outsourcing all security operations to third-party vendors

Answer: A

Question 5

In the context of the cloud shared responsibility model, which of the following scenarios best illustrates a misunderstanding of security responsibilities when using Infrastructure as a Service (IaaS)?

Options :

A : The customer encrypts sensitive data stored on the cloud.

B : The CSP implements multi-factor authentication (MFA) for access to its management console.

C : The customer assumes the CSP is responsible for securing access to their virtual machines.

D : The CSP maintains physical security and prevents unauthorized access to data centers.

Answer: C

Higher Test Marks with Free Online Cybersecurity-Apprentice Exam Practice

Buying Options: